mirror of
https://github.com/d35ha/CallObfuscator
synced 2026-06-08 13:42:37 +00:00
25 lines
715 B
INI
25 lines
715 B
INI
; Template for the config file:
|
|
; * Sections can be written as:
|
|
; [dll_name]
|
|
; old_sym=new_sym
|
|
; * The dll name is case insensitive, but
|
|
; the old and the new symbols are not.
|
|
; * You can use the wildcard on both the
|
|
; dll name and the old symbol.
|
|
; * You can use '#' at the start of
|
|
; the old or the new symbol to flag
|
|
; an ordinal.
|
|
; * The new symbol should be exported
|
|
; by the dll so the windows loader can resolve it.
|
|
; For example:
|
|
; * Obfuscating all of the symbols
|
|
; imported from user32.dll with ordinal 1600.
|
|
[user32.dll]
|
|
*=#1600
|
|
; * Obfuscating symbols imported from both
|
|
; kernel32.dll and kernelbase.dll with Sleep.
|
|
[kernel*.dll]
|
|
*=Sleep
|
|
; * Obfuscating fprintf with exit.
|
|
[*]
|
|
fprintf=exit |