DEE - Dll Exports Viewer

[monoceres]

Hi!

I have in the last couple of days read about the windows portable executable format (PE format) and this is the result.

It's a program that lists all the exported functions in a dll and gives you the option to google search the function or if it's a windows function, go directly to the msdn page.

I'm very happy about the function that gets the exported functions, only one DllCall and the rest is DllStructs and Pointers

Here's a screenshot:

Download link:

http://monoceres.se/Uploads/DEE.zip

Enjoy! >_<

Edited September 20, 2008 by monoceres

[DjDeep00]

Nice work monoceres...very helpful indeed!

[trancexx]

Nice colors, simple but beautiful design

What if I load resource-only dll. Will it crash?

Impressive!

[dworld]

Hi

it's amazing..

I really like it and will use it!

Thx monoceres

go on and don't stop:)

one question:

what do you think if you can change the height of the form in order to see much more items in the list?

[monoceres]

Thanks everyone >_<

I don't about the resource dll, but it may crash if there isn't an export data directory in the file.

I guess I could make the GUI resizeable, but the GUI really come in second here, really don't like working with GUI programming

[Richard Robertson]

You might think of making a console extension so if it's called with a certain command line to just output the exports to the standard output.

[SmOke_N]

Nice work monoceres... I could have sword someone else just did this not to long ago... maybe that was for constants.

Now get to work on creating the call to those functions found on MSDN (Creating the structs, proper DllCall() setup ... etc ) >_<

[Kip]

Nice!

Damn, Kernel32 has a heck lot of functions.

[martin]

Very good monoceres. The structures look quite painful!

Is it possible to show whether each function is an export function or not? That would be useful for checking your own dlls.

If you could say whether a function should be called with cdecl or if it's a stdcall it would be great. Is that possible?

[monoceres]

Nice work monoceres... I could have sword someone else just did this not to long ago... maybe that was for constants.

Now get to work on creating the call to those functions found on MSDN (Creating the structs, proper DllCall() setup ... etc ) >_<

Hope not, it's always cool to be the first

Actually I have thought of that, actually everytime I'm creating a struct that contains a lot of members I'm thinking about creating a script that would translate the c++ definition into autoit. Maybe one day...

Very good monoceres. The structures look quite painful!

Is it possible to show whether each function is an export function or not? That would be useful for checking your own dlls.

If you could say whether a function should be called with cdecl or if it's a stdcall it would be great. Is that possible?

Actually it wasn't too bad, I wrote the entire thing in c++ first and then just translated the whole thing

All functions listed are exports, exported functions are the only one you can get from a dll. And I don't think the calling convention is retrievable, never seen it in any other export viewer anyway.

Edited September 16, 2008 by monoceres

[WeMartiansAreFriendly]

I was just going through some of your posts and you have some really wonderful scripts.

Thanks for sharing.

[GEOSoft]

Great work again. I was just playing with it for a few minutes and it seems to work fine adding *.ocx into the file types as well. More testing may be required to verify that though.

[Innovative]

Can we find the parameters needed for each function ?

[monoceres]

Great work again. I was just playing with it for a few minutes and it seems to work fine adding *.ocx into the file types as well. More testing may be required to verify that though.

Great, it seems to work, at least with the two .ocx files I could find on my computer

Can we find the parameters needed for each function ?

It is not possible to get this information from the dll, your best shot is to do a google search.

[ChromeFan]

it's good, very nice one...

[monoceres]

Updated the script.

Changes:

• Added Commandline tool
• Added resizeable height
• More checks to avoid crashes
• .ocx is now available to open

[Andreik]

Beautiful design. Very nice.

[rasim]

monoceres

Very nice and useful! Thank you for sharing.

[Innovative]

It is not possible to get this information from the dll, your best shot is to do a google search.

But what if it is a custom dll ? There might not be informations for those on the engines.

[trancexx]

Updated the script.

Changes:

• Added Commandline tool
• Added resizeable height
• More checks to avoid crashes
• .ocx is now available to open

Looking good.

I'v been playing with commandline version and made some changes that makes it more user friendy (lol). This is only about user - program relation (communication) and has nothing to do with real program.

I'v added interactive mode that makes it unnotlikeable (actually heard this word once).

Check it out (I did not see this feature with any AutoIt's CUI):

expandcollapse popup

#Region ;**** Directives created by AutoIt3Wrapper_GUI ****
#AutoIt3Wrapper_Version=beta
#AutoIt3Wrapper_Icon=icon.ico
#AutoIt3Wrapper_Outfile=DEEcmd_alt.exe
#AutoIt3Wrapper_UseUpx=n
#AutoIt3Wrapper_Change2CUI=y
#AutoIt3Wrapper_Res_Description=DEE - Dll Exports Viewer CommandLine version
#AutoIt3Wrapper_Res_Fileversion=1.0.0.0
#AutoIt3Wrapper_Res_Language=1033
#EndRegion ;**** Directives created by AutoIt3Wrapper_GUI ****
#include <array.au3>
#include "dllexports.au3"
#NoTrayIcon

If $CmdLine[0] = 0 Then
    InteractiveMode()
EndIf

If $CmdLine[1] = "-help" Or $CmdLine[1] = "?" Then
    ConsoleWrite(@CRLF & 'DEEcmd usage:           path [/a]' & @CRLF & @CRLF)
    ConsoleWrite("    path         fully qualified path to the dll or ocx file" & @CRLF & "    /a           prints the address of each exported function (optional)" & @CRLF)
    ConsoleWrite(@CRLF & @CRLF & 'Description:' & @CRLF)
    ConsoleWrite('    This command line tool enables you to list all exported functions' & @CRLF & '    for the specified dll or ocx file' & @CRLF)
    Exit
Else
    $printaddress = False
    If $CmdLine[0] > 1 And $CmdLine[2] = "/a" Then $printaddress = True
    
    If StringRight($CmdLine[1], 4) = '.dll' Or StringRight($CmdLine[1], 4) = '.ocx' Then
        $array = _GetExportedFunctions($CmdLine[1])
        If Not IsArray($array) Then
            ConsoleWrite(@CRLF & "Invalid file!" & @CRLF)
            Exit
        EndIf
    Else
        ConsoleWrite(@CRLF & "Invalid input. Type ? for help." & @CRLF)
        Exit
    EndIf
    For $i = 0 To UBound($array) - 1
        ConsoleWrite($array[$i][0])
        If $printaddress Then ConsoleWrite(" (" & $array[$i][1] & ")")
        ConsoleWrite(@CRLF)
    Next
    Exit
EndIf


Func InteractiveMode()
    
    ConsoleWrite(@CRLF & "Dll Exports Viewer >")

    $file = FileOpen("con", 4)

    While 1

        $line = BinaryToString(FileRead($file, 123))

        Switch $line
            
            Case "quit" & @CRLF, "exit" & @CRLF
                Exit
            Case "-help" & @CRLF, "?" & @CRLF
                ConsoleWrite(@CRLF & 'DEEcmd usage:           path [/a]' & @CRLF & @CRLF)
                ConsoleWrite("    path         fully qualified path to the dll or ocx file" & @CRLF & "    /a           prints the address of each exported function (optional)" & @CRLF)
                ConsoleWrite(@CRLF & @CRLF & 'Description:' & @CRLF)
                ConsoleWrite('    This command line tool enables you to list all exported functions' & @CRLF & '    for the specified dll or ocx file' & @CRLF)
            Case Else
                $printaddress = False
                $line = StringTrimRight($line, 2)
                $in = StringRegExpReplace($line, '(.*?) {1}/a\Z', '$1')
                If StringRight($line, 2) = '/a' Then $printaddress = True
                
                If StringRight($in, 4) = '.dll' Or StringRight($in, 4) = '.ocx' Then
                    $array = _GetExportedFunctions($in)
                    If Not IsArray($array) Then ConsoleWrite(@CRLF & "Invalid file!" & @CRLF)
                Else
                    $array = 0
                    ConsoleWrite(@CRLF & "Invalid input. Type ? for help." & @CRLF)
                EndIf
                
                For $i = 0 To UBound($array) - 1
                    ConsoleWrite($array[$i][0])
                    If $printaddress Then ConsoleWrite(" (" & $array[$i][1] & ")")
                    ConsoleWrite(@CRLF)
                Next
                
        EndSwitch

        ConsoleWrite(@CRLF & "Dll Exports Viewer >")

    WEnd

EndFunc

When compiled, it can be used like before or in this new mode (doubleclick it, or call it with no parameers from command prompt). Left AutoIt3Wrapper_GUI directives.

btw, still crashing when loaded with resource-only dll.