View Single Post
  #2  
Old 08-19-2019, 21:07
Nacho_dj's Avatar
Nacho_dj Nacho_dj is online now
Lo*eXeTools*rd
 
Join Date: Mar 2005
Posts: 207
Rept. Given: 14
Rept. Rcvd 179 Times in 34 Posts
Thanks Given: 44
Thanks Rcvd at 135 Times in 40 Posts
Nacho_dj Reputation: 100-199 Nacho_dj Reputation: 100-199
Independently of the fact that if this can/cannot be achieved by some compiler directives (I really don't know), if you are only pretending to change the order in the function names, well every entry in Original First Thunk is a pointer to a function name (this is not true if the entry comes as an ordinal), so if you want exclusively to get shuffled function names, you can build a "simple" tool to modify the order within import table area of every function name string, and then accordingly modify the pointers to those name of funtions in the Original First Thunk. This could be performed statically in the PE file.

Best regards

Nacho_dj
__________________
http://arteam.accessroot.com
Reply With Quote
The Following 2 Users Say Thank You to Nacho_dj For This Useful Post:
Newbie_Cracker (08-20-2019), tonyweb (08-25-2019)