windowsdebuggingdllxperf

See registry entries and files used by DLL

I'm quite new with analysing Windows processes, and have during the last week found Xperf very useful, and I have some questions about analysing DLLs.

I was wondering if it is possible to see which registry entries and file paths which are used by a specific DLL image used by a process, and with which tools I can achieve this.

If this is not possible I was wondering what are good strategies to find out which resouces a DLL is using, or alternative approaches.

Solution

  • You can use Process Explorer for this. Most of the other SysInternals process tools are very useful, too - Process Explorer is just one with (complex) UI for showing a lot of data. Process Monitor shows real-time registry, file system, etc. access for processes.