/WhoCalls

WhoCalls can query a directory of files, find the binaries, and search for a user specified Win API import. It works with both 32-bit (PE) and 64-bit (PE32+) file formats (.exe, .dll, .sys)

Primary LanguageC

WhoCalls

WhoCalls can query a directory of files, find the binaries, and search for a user specified Win API import. It works with both 32-bit (PE) and 64-bit (PE32+) file formats (.exe, .dll, .sys)

Example Use

WhoCalls.exe [API Name] [Path To Query]

API Name: A valid Windows API function. eg: ExitProcess
Path To Query: A valid path without the ending backslash . eg: C:\Users\Admin\Desktop