0

Where would I look if I wanted to know which third party libraries an application (win32) has used?

I found this info yesterday (with Ollydbg, I think) but for the love of me just can't figure out anymore how I did it. All I remember is that the format was easily readable, not hex.

2

i believe this cant be done easily without debug information \ symbols.

Statically linked libraries means that part of the code of the program contains the functions of the third party libraries.

Lets take for example an open ssl library.

Once you compile your code with the openssl code attached (as part of your code solution), in the assembly you cant really know which part of the code is part of the library and which one is the code of your main program.

If you want a way to figure out if a library is linked into your program, you might want to try to look for debug strings that were left behind during compilation that would help out.

Also for future reference and finding dynamically linked libraries, i would suggest CFF-explorer

1
  • Thanks. I came to the same conclusion. I must have deducted the use of libraries based on some strings I found in the disassembly and later mixed this up in my own memory. That one also seems to need some serious reversing. – vic Nov 9 '15 at 21:37
0

I think you are referring to the executable modules view in Olly.

Executable modules

You might also be interested in Dependency Walker.

2
  • No, not dependencies, statically linked libraries. I found something in the code that mentioned these, one by one. I need that info to get those libraries and map the symbols. I was doing so many things on that code that I just forgot how I got there. – vic Nov 9 '15 at 8:55
  • My bad, misunderstood your question. – Dominik Antal Nov 10 '15 at 15:48

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.