PE_search_str_refs is a simple tool for searching for a function in PE executables which use some text string
PE_search_str_refs.exe [--unicode] [--verbose] filename.exe text_string
PE_search_str_refs.exe filename.exe hello
Resulting address will (hopefully) be an address of function which use this text string.
It may produce a lot of disassembling errors to stderr, so it can be redirected to NUL:
PE_search_str_refs.exe filename.exe hello 2> nul
It can also be used in pair with my other utility: PE_patcher.
Download: win32 executable, win64 executable
Source code. Bolt library in which this utility is incorporated
→ [back to the main page]