Kudaes / CustomEntryPoint

Select any exported function in a dll as the new dll's entry point.

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Description

This tool will patch the entry point of the input dll and replace it with the RVA of another exported function in that same dll. This allows to select any exported function in the dll as the new entry point.

The main reason to develop this utility is because, at the time this repository is being created, Rust does not allow to compile to a dll with a custom entry point (unless you forgo using the standard library). Anyway, the tool can be used to patch the entry point of a dll written in other languages as well.

Compilation

Since we are using LITCRYPT plugin to obfuscate string literals, it is required to set up the environment variable LITCRYPT_ENCRYPT_KEY before compiling the code:

C:\Users\User\Desktop\CustomEntryPoint> set LITCRYPT_ENCRYPT_KEY="yoursupersecretkey"

After that, simply compile the code and execute it:

C:\Users\User\Desktop\CustomEntryPoint> cargo build --release
C:\Users\User\Desktop\CustomEntryPoint\target\release> entry_point.exe -h

Usage

C:\Users\User\Desktop> entry_point.exe -i c:\path\to\input\file.dll -f ExportedFunctionName -o c:\output\path\file2.dll

About

Select any exported function in a dll as the new dll's entry point.

License:Apache License 2.0


Languages

Language:Rust 100.0%