How to shuffle names in the PE import table?
Hi Guys.
As I tried, it does not matter how the order of functions and API calls is in my C/C++ source code. Microsoft Visual Studio Linker fills the import table in a specific way, which is not clear to me; but the order of API names is constant for my code. For instance, it does not matter I call ReadFile() before or after SetFilePointer(). In a compiled EXE file, SetFilePointer may come even before CreateFileA/W.
Is there any way to change this order, literally shuffle the order of names at each compile?
The hardest way is to rebuild the import table; but it needs searching and patching the code to point to new import table. I'm looking for a quick way.
Any idea?
__________________
In memory of UnREal RCE...
Last edited by Newbie_Cracker; 08-18-2019 at 16:19.
|