Log in

View Full Version : How to look for in the Export table of a DLL ?


Whiskey
January 19th, 2004, 09:28
Hi,
i want to look in the Export Table of a Dll that i loaded into OllyDBG but i dont know how....

Can someone say me if it is possibel and if it is how?

Greetz
Whiskey

focht
January 19th, 2004, 10:22
Greetings,

"executable modules" window -> select module you want export/import table to show -> right click (context menu) "view names".
Shortcut "Ctrl+N" will show table too depending on current module context.

Regards,

A. Focht

Whiskey
January 19th, 2004, 10:45
But if i do so, i dont see anything in the Executable Modules window...

i load the dll over:
view-->file

i hope someone can help me...

greetz
whiskey

focht
January 19th, 2004, 11:00
Greetings,

no you cant do it this way.
"view" -> "file" will only show a binary dump of the file.

You must load the dll using executable file so ollydbg can analyze it.
Just open the .exe file which consumes the dll and then do the actions.

You might use some custom made exectable too, which simply does LoadLibrary() to load it into ollydbg.
Look here for example loader:

http://ollydbg.win32asmcommunity.net/?action=vthread&forum=1& topic=533
("http://ollydbg.win32asmcommunity.net/?action=vthread&forum=1&topic=533
")

Regards,

A. Focht

Whiskey
January 19th, 2004, 11:20
Thank u for your suport, one last question.

Must the application that loads the Dll, know which Function the Dll have?

Or can i make a programm that dont do anything else then load the libraray?

Greetz
Whiskey

focht
January 19th, 2004, 11:37
Hi again,

no, a simple LoadLibrary call will be sufficient for you task.
If you want to trace/step the dll "alive" then you need to call an exported function with appropriate calling convention/parameters.
A Dll usually has an entry point to initialize runtime stuff, setup global variables etc. that gets called on loader events.

Regards,

A. Focht

naceur
January 20th, 2004, 10:14
please step by step