PE_search_str_refs is a simple tool for searching for a function in PE executables which use some text string


PE_search_str_refs.exe [--unicode] [--verbose] filename.exe text_string

For example:

PE_search_str_refs.exe filename.exe hello

Resulting address will (hopefully) be an address of function which use this text string.

It may produce a lot of disassembling errors to stderr, so it can be redirected to NUL:

PE_search_str_refs.exe filename.exe hello 2> nul

It can also be used in pair with my other utility: PE_patcher.

Download: win32 executable, win64 executable

Source code. Bolt library in which this utility is incorporated

→ [back to the main page]