Utility for extracting .dll files from various dumps

[Enyby]

Description: extracts PE-files (.exe, .dll, etc.) from .bin files.
For example, memory dumps. For example, from the one that can be obtained through GameGuardian.

Use cases:
1. .exe file to be placed in one folder with a .bin file (s) and run.
2. On the .exe file, drag the folder with the .bin file (s).
3. Write in the command line:

> get_dll_from_bin.exe path/to/your/.bin/files

 

Result: In the same folder where there were .bin files there will appear .dll files if something was found.

 

Example of output:

Usage: drag dir with .bin files to .exe. Tool scan its and extract pe files as .dll files in same folder.
Author: Enyby.
Used dir: dump
dump/com.raongames.growcastle-00008000-0000a000.bin:
dump/com.raongames.growcastle-04000000-1c106000.bin:
Not valid PE header: 2e746578
dump/com.raongames.growcastle-1c179000-1c17c000.bin:
dump/com.raongames.growcastle-94ebb000-95161000.bin:
Make 0.dll with size 2737152
dump/com.raongames.growcastle-95169000-951ae000.bin:
dump/com.raongames.growcastle-951c6000-95321000.bin:
Make 1.dll with size 359424
Make 2.dll with size 878592
dump/com.raongames.growcastle-95325000-95335000.bin:
dump/com.raongames.growcastle-9533d000-95583000.bin:
Make 3.dll with size 309248
dump/com.raongames.growcastle-95783000-96fe2000.bin:
Make 4.dll with size 1684480
dump/com.raongames.growcastle-96fe5000-97371000.bin:
dump/com.raongames.growcastle-976f5000-b7756000.bin:
dump/com.raongames.growcastle-b7942000-bac40000.bin:
Make 5.dll with size 3072
Make 6.dll with size 9728
Make 7.dll with size 171520
Make 8.dll with size 103936
Make 9.dll with size 6656
Make 10.dll with size 10240
Make 11.dll with size 13824
Make 12.dll with size 24576
Make 13.dll with size 65536
Make 14.dll with size 47104
Make 15.dll with size 9216
Make 16.dll with size 41472
Make 17.dll with size 66560
Make 18.dll with size 44032
Make 19.dll with size 18432
Make 20.dll with size 29184
Make 21.dll with size 33280
Make 22.dll with size 175616
dump/com.raongames.growcastle-bf810000-bf831000.bin:

Download: https://gameguardian.net/forum/files/file/7-utility-for-extracting-dll-files-from-various-dumps/

Old links:

Spoiler

 

get_dll_from_bin20170420002943.rar

V2 - more output. On error extract too.

V2: get_dll_from_bin20170719054238.rar

V2.1 - add check for dll size. Max - 80 MB.

V2.1: get_dll_from_bin20170719174514.rar

 

[Riyqn]

Pada 25/1/2018 di 11:02, Brandonbeatty berkata:

download ditebang karena jatuhnya jaringan hiw bisa saya perbaiki masalah ini ???

m.youtube.com

[JustMagic]

Hello @Enyby

I put the exe file inside the folder where the dumped bin files are and I even dragged the whole folder to the exe file but it just read the files but it does not convert them to dll,

at the end I just get "Press any key to continue..." message.

Am I missing something?

 

Edited March 14, 2018 by JustMagic

[Enyby]

Do not use path with non-English chars or spaces.

[JustMagic]

6 hours ago, Enyby said:

Do not use path with non-English chars or spaces.

I did now, still the same issue. No DLL.

Btw I dumped it thru an emulator. Maybe thats the reason?

[Enyby]

Then on this bin no dll at all.

[TigerOMs]

why can not I get Assembly-CSharp.dll file? =]]

there are only other dll files and no Assembly-CSharp.dll at all, the file which is important to take

what should I do?

I had ask iandrohacker and G-Bo about this and they do not tell me

can you tell me the solution plz, Enyby?

thank you very much

[Enyby]

Maybe this file is not there. And maybe the headers are spoiled. And maybe something else. You can guess as many as you like.

[TigerOMs]

3 minutes ago, Enyby said:

Maybe this file is not there. And maybe the headers are spoiled. And maybe something else. You can guess as many as you like.

but what I need is to find a solution for that

[Enyby]

I can not help you. I can only wish good luck in your search.

[TigerOMs]

thanks btw

[planet_mars]

Help i fount this error

Possible PE at 18363488
Not valid PE header: found "2e746578" but must be "50450000"
We try extract file in any case.
Try make 0.dll with size 3172206742713
Size too big. Skipped.