Assembly obfusscation

[ajron]

Originally Posted by redbull

I guess a work around could be MapViewOfFile but that would write the changes back to the exe file

You can use MapViewOfFile with copy on write access by setting up FILE_MAP_COPY access falg.

Originally Posted by Zigmund

Hardest and more professional methods : write you own translator and write VirtualMachine.

I agree. Some time ago I had written crackme that use this method. Crackme is very very easy, but it's very hard to trace it. Only 2 guys show me a solution. You can see what I'm talking about at hxxp://powergg.prv.pl/crackme.zip