2

I want to reuse a dll which is imported in another exe. Is there any tool that can extract dlls (load-time dynamic linking & run-time dynamic linking) of an exe?

Load-time dynamic linking --> I want extract a copy of each dll (user32.dll, kernel32.dll ...) Load-time dynamic linking --> I want extract a copy of each dll (user32.dll, kernel32.dll ...)

For run-time dynamic linking: I want to extract the dlls that are loaded via LoadLibrary functions.

  • Was this "another exe" already loaded before your application? – PhoeniX Jan 24 '14 at 8:52
  • No, just this "another exe" not already run. I just want to analyze statically – tuantm Jan 25 '14 at 2:17
  • What do you mean by "extract"? The DLL is stored as a resource in other executable? – PhoeniX Jan 25 '14 at 19:29
  • 1
    Can you explain your situation in more details, what do you mean by "extracting a DLL"? It's name? Please edit your question with more details. – 0xea Jan 30 '14 at 12:10
2

Thank you all for your considering! After googling days by days for tools but didn't get any, I had my temporary solution that I write a tool as below:

  • For load-time dynamic linking: Parsing the PE structure of this exe to export the dll names in the import directory then search them in %path% enviroment variable and the current directory of the exe. If the dlls exist, I copy them to the output.

  • For run-time dynamic linking: Hooking the LoadLibrary functions to get the dll names then check the existence (similar as above).

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.