3

I have a game (Crysis 2) and the developers exported each DLL to be loaded separately by the main executable instead of merging all of them. Instead of having 9 instance of IDA open everytime and switching between tabs I wanted to load all the modules together as if they were 1 executable. I looked at this :

http://www.hexblog.com/?p=6

and when I tried the script it had a syntax error, which I later fixed. Once I "fixed" it (by merely commenting the function call out) I tried running the script again and ended up with this :

IDA Error from the script

It then loads the segment but doesn't load strings, imports etc. because as the error stated the main structure in the PE file format was not found..

Does anyone have any solutions to this or any alternative ways of loading all the DLLs in one database?

  • 1
    There is a second part to the post you mention, describing a better method (hexblog.com/?p=7) Have you tried that? – Carlos Garcia Apr 17 '15 at 7:12
  • @CarlosGarcia I tried to use that method by loading the main executable in IDA then running it but sadly the other modules (all the other DLLs) don't get loaded so dumping it would be dumping only the executable by itself. (In short IDA debugger doesn't load the other modules). – Knochove Apr 17 '15 at 12:49

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.