CODEWITHSUNDEEP
assemblydisassembly
Guillaume Paris
Guillaume Paris

Reputation: 10539

find a particular function in a executable using dumpbin tools family

Is it possible to know with dumpbin tools if a executable under windows use the command arp ?

Upvotes: 0

Views: 402

Answers (1)

Jerry Coffin
Jerry Coffin

Reputation: 490118

No, not really. If it has arp.exe as a string literal, and passes that string literal to WinExec, CreateProcess, etc., that'll be pretty easy to find. It could, however, do something like reading arp.exe in from a file at run-time, which will make it considerably more difficult to find.

Upvotes: 1

Related Questions