Internet Explorer allows for creating thick clients that run in the browser via a Browser Helper Object (BHO).

In trying to reverse one such thick client I noticed that the website downloads about fifteen DLL files making it difficult to discern where the entry point is.

Since the files were written in .NET they were (mostly) decompiled by using dotPeek

What are some steps that can be taken to help narrow down the entry point - and possibly to debug certain actions? Also, is there another tool that would prove more useful in decompiling .NET dll's?

  • entry point for what dll or IE i didn't get what u mean so can explain more ? – zixcool May 17 '18 at 18:41
  • 1
    dnSpy is miles better than anything else out there. As a bonus you can also use it to debug executables you don’t have the source for. – mrexodia May 18 '18 at 11:19

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.