ExportFinder

enumerate · search · resolve

Free software. It lists the export table of any Windows DLL, including named and ordinal-only exports and forwarders, and can search a whole folder for a given export by name. It only reads files: it never loads or executes the DLLs it inspects.

Free software · No license key · Windows 10 / 11 · 64-bit

See it in action

Every export, at a glance

Point it at a folder, pick a DLL, and read the whole export table: ordinal, RVA, name and, for a forwarder, exactly where it forwards to. Here kernel32.dll with all 1693 of its exports.

ExportFinder showing the export table of kernel32.dll - ordinal, RVA, name and forwarder columns - with the folder DLL list and the folder-wide export search on the left
Folder DLL list Ordinal / RVA / name Forwarder targets Search a whole folder Export or copy the results

Why ExportFinder

Read a DLL's exports without running it

Everything you need to answer "what does this DLL export, and which module exports this function" - parsed straight from the file on disk.

The complete export table

Every entry a DLL publishes, with its ordinal, RVA and name - read directly from the PE export directory, in the order the module declares them.

#

Ordinal-only exports too

Exports published by ordinal with no name are listed like any other, so nothing is hidden just because the module never named it.

Forwarders resolved

A forwarded export shows its real target - NTDLL.RtlAcquireSRWLockExclusive, api-ms-win-core-libraryloader-l1-1-0 and the rest - so you can follow the chain to the module that really implements it.

Search a whole folder

Type an export name and search every DLL in a directory at once to find which module exports it. Turn on Recursive to sweep the subfolders as well - handy against C:\Windows\System32.

Filter as you type

Narrow the DLL list and the export rows instantly, by name, ordinal or forwarder target, with a live count of what matched against the total.

It never runs what it reads

ExportFinder opens each file for reading and parses its headers. It does not call LoadLibrary and it never executes a DLL, so inspecting an untrusted or malformed module runs none of its code.

Take the results with you

Export... writes the rows to a file and Copy all puts them on the clipboard - always exactly the rows currently shown, so a filtered view saves a filtered list.

Free, and stays free

No license key, no trial timer and no account: download it and use it. Runs on Windows 10 and 11, 64-bit.