开发者

find a particular function in a executable using dumpbin tools family

开发者 https://www.devze.com 2023-04-08 22:21 出处:网络
Is it possible to know with dumpbin tools if a execu开发者_运维知识库table under windows use the command arp ?No, not really. If it has arp.exe as a string literal, and passes that string literal to W

Is it possible to know with dumpbin tools if a execu开发者_运维知识库table under windows use the command arp ?


No, not really. If it has arp.exe as a string literal, and passes that string literal to WinExec, CreateProcess, etc., that'll be pretty easy to find. It could, however, do something like reading arp.exe in from a file at run-time, which will make it considerably more difficult to find.

0

精彩评论

暂无评论...
验证码 换一张
取 消