运行时生成其它EXE文件（VB6）

大家经常能看到一些程序，如木马程序能够生成一个完整的可执行程序出来，是不是觉得很有意思？其实VB也能做到这一点。

首先我们需要把一个EXE文件转为容易在程序中保存的文本形式，这里我转成16进制表示，大家也可以转为Base64或其它兼容的格式。下面这个函数能将二进制文件转为VB可识别的语句。

Function ConvBinToHex(byval strVarName as string,byval strInFile as string,byval strOutFile as string)
    Open strInFile For Binary Access Read As #1
        ReDim bBytes(LOF(1))
        Get 1, , bBytes
    Close #1
   
    Dim strHex As String, strHexTmp As String
    Dim i As Long, n As Long
    strHex = strVarName & " = """
   
    For i = 0 To UBound(bBytes)
        strHexTmp = Hex(bBytes(i))
        If Len(strHexTmp) = 1 Then
            strHexTmp = "0" & strHexTmp
        End If
       
        n = n + 1
        If n = 50 Then      '设置一行显示50个字节
            strHex = strHex & """" & vbCrLf & strVarName & " = " & strVarName & " & """ & strHexTmp & " "
            n = 0
        Else               
            strHex = strHex & strHexTmp & " "
        End If
    Next
   
    strHex = Left(strHex, Len(strHex) - 1) & """"
   
    Open strOutFile For Output As #1
        Print #1, strHex
    Close #1

End Function

执行上面的函数后，我们会得到这样的代码：

trBin = "4D 5A 90 00 03 00 00 00 04 00 00 00 FF FF 00 00 B8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 "
strBin = strBin & "00 00 00 00 00 00 00 00 00 00 00 C0 00 00 00 0E 1F BA 0E 00 B4 09 CD 21 B8 01 4C CD 21 54 68 69 73 20 70 72 6F 67 72 61 6D 20 63 61 6E 6E 6F 74 20 62 "
.............

将这些代码放入VB的工程源代码中，再使用下面的函数即可完成将文本恢复为二进制的功能：

Public Function ConvHexToBin(ByRef strHex As String, ByRef OutputFile As String)
    Dim vHex As Variant, bBytes() As Byte, i As Long
    vHex = Split(strHex, " ", -1)
    ReDim bBytes(UBound(vHex))
    For i = 0 To UBound(vHex)
        bBytes(i) = CDec("&H" & vHex(i))
    Next
   
    Open OutputFile For Binary Access Write As #1
        Put #1, , bBytes
    Close #1
End Function

大家有什么好的想法欢迎留言：）