Reverse Engineering RET Homepage RET Members Reverse Engineering Projects Reverse Engineering Papers Reversing Challenges Reverser Tools RET Re-Search Engine Reverse Engineering Forum Reverse Engineering Links

Reverse Engineering Team Blog

03.17.05

VB6 Self-Modifying Code

Posted in General Posts at 10:54 am by Devine9

VB6 Self-Modifying Code by SneakCharm

=====================================================
Resources : www.google.com
: brain
=====================================================

Self-Modifying code is a nice way to confuse and toy with crackers.
I enjoy doing it very much so, so I will present the theory behind it and
a working prototype!

The visual basic 6 language does not allow the use of inline assembler.
Thus, we must look elsewhere and a class module (COM) answers
our call.

The typical every day class module consists of a virtual table.
This table contains pointers to every method in our class. In theory, we
should be able to allocate a block of memory, move machine code there,
and rewrite the virtual table to point to the allocated memory.

This solves the problem of inline assembler, and then to self-modifying
code? All we have to do is rewrite the block of memory!

The real trick is mixing this with pcode compilation.
It’s a deadly mix of protection smile

Download: support-files.zip

SneakCharm
March 17, 2005

2 Comments »

  1. C0113c70r said,

    March 12, 2007 at 12:12 am

    Nice article, but where’s the file? Your link is dead.

  2. Just me said,

    July 2, 2008 at 5:45 pm

    Sounds nice but the link is dead. can you post the source?

Leave a Comment