Jump to content
Enyby

Utility for extracting .dll files from various dumps

Recommended Posts

Description: extracts PE-files (.exe, .dll, etc.) from .bin files.
For example, memory dumps. For example, from the one that can be obtained through GameGuardian.

Use cases:
1. .exe file to be placed in one folder with a .bin file (s) and run.
2. On the .exe file, drag the folder with the .bin file (s).
3. Write in the command line:


> get_dll_from_bin.exe path/to/your/.bin/files
 
Result: In the same folder where there were .bin files there will appear .dll files if something was found.
 
Example of output:
Usage: drag dir with .bin files to .exe. Tool scan its and extract pe files as .dll files in same folder.
Author: Enyby.
Used dir: dump
dump/com.raongames.growcastle-00008000-0000a000.bin:
dump/com.raongames.growcastle-04000000-1c106000.bin:
Not valid PE header: 2e746578
dump/com.raongames.growcastle-1c179000-1c17c000.bin:
dump/com.raongames.growcastle-94ebb000-95161000.bin:
Make 0.dll with size 2737152
dump/com.raongames.growcastle-95169000-951ae000.bin:
dump/com.raongames.growcastle-951c6000-95321000.bin:
Make 1.dll with size 359424
Make 2.dll with size 878592
dump/com.raongames.growcastle-95325000-95335000.bin:
dump/com.raongames.growcastle-9533d000-95583000.bin:
Make 3.dll with size 309248
dump/com.raongames.growcastle-95783000-96fe2000.bin:
Make 4.dll with size 1684480
dump/com.raongames.growcastle-96fe5000-97371000.bin:
dump/com.raongames.growcastle-976f5000-b7756000.bin:
dump/com.raongames.growcastle-b7942000-bac40000.bin:
Make 5.dll with size 3072
Make 6.dll with size 9728
Make 7.dll with size 171520
Make 8.dll with size 103936
Make 9.dll with size 6656
Make 10.dll with size 10240
Make 11.dll with size 13824
Make 12.dll with size 24576
Make 13.dll with size 65536
Make 14.dll with size 47104
Make 15.dll with size 9216
Make 16.dll with size 41472
Make 17.dll with size 66560
Make 18.dll with size 44032
Make 19.dll with size 18432
Make 20.dll with size 29184
Make 21.dll with size 33280
Make 22.dll with size 175616
dump/com.raongames.growcastle-bf810000-bf831000.bin:

Download: https://gameguardian.net/forum/files/file/7-utility-for-extracting-dll-files-from-various-dumps/

Old links:

Spoiler

 

get_dll_from_bin20170420002943.rar

V2 - more output. On error extract too.

V2: get_dll_from_bin20170719054238.rar

V2.1 - add check for dll size. Max - 80 MB.

V2.1: get_dll_from_bin20170719174514.rar

 

Share this post


Link to post
Share on other sites

Pada 25/1/2018 di 11:02, Brandonbeatty berkata:

download ditebang karena jatuhnya jaringan hiw bisa saya perbaiki masalah ini ???

m.youtube.com

Share this post


Link to post
Share on other sites

Hello @Enyby

I put the exe file inside the folder where the dumped bin files are and I even dragged the whole folder to the exe file but it just read the files but it does not convert them to dll,

at the end I just get "Press any key to continue..." message.

Am I missing something?

 

4.png

Edited by JustMagic

Share this post


Link to post
Share on other sites

Do not use path with non-English chars or spaces.

Share this post


Link to post
Share on other sites
6 hours ago, Enyby said:

Do not use path with non-English chars or spaces.

I did now, still the same issue. No DLL.

Btw I dumped it thru an emulator. Maybe thats the reason?

Share this post


Link to post
Share on other sites

Then on this bin no dll at all.

Share this post


Link to post
Share on other sites

why can not I get Assembly-CSharp.dll file? =]]

there are only other dll files and no Assembly-CSharp.dll at all, the file which is important to take

what should I do?

I had ask iandrohacker and G-Bo about this and they do not tell me

can you tell me the solution plz, Enyby?

thank you very much

Share this post


Link to post
Share on other sites

Maybe this file is not there. And maybe the headers are spoiled. And maybe something else. You can guess as many as you like.

Share this post


Link to post
Share on other sites
3 minutes ago, Enyby said:

Maybe this file is not there. And maybe the headers are spoiled. And maybe something else. You can guess as many as you like.

but what I need is to find a solution for that

Share this post


Link to post
Share on other sites

I can not help you. I can only wish good luck in your search.

Share this post


Link to post
Share on other sites

Help i fount this error

Possible PE at 18363488
Not valid PE header: found "2e746578" but must be "50450000"
We try extract file in any case.
Try make 0.dll with size 3172206742713
Size too big. Skipped.

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

×
×
  • Create New...