How Do I Execute Byte Array Of Raw X86 Instruction?

Question

1.00/5 (1 vote)

See more:

I want to execute a raw EXE stored in a byte array, without writing it to disk. Like putting it in memory and executing it in the same way as the EXE on disk would be double clicked

Posted 24-Jul-14 5:38am

mehdimughal

Add a Solution

Comments

gggustafson 24-Jul-14 12:49pm

Are you writing the machine code or c opying it from some place?

mehdimughal 24-Jul-14 12:56pm

Copying it

mehdimughal 24-Jul-14 12:58pm

e.g I read an executable into byte array. Now i want to execute it from memory. Without making new exe on disk

gggustafson 24-Jul-14 13:14pm

How familiar are you with the format of an executable file? Do you have control over the contents of the executable that you copied into the byte array?

Sergey Alexandrovich Kryukov 24-Jul-14 12:59pm

It means that you need to write a loaded, but you have no access to the kernel mode, except for a kernel-mode driver. It's possible that you will have to write your own "disk" driver to let the application load the "file" from memory.
—SA

mehdimughal 24-Jul-14 13:06pm

http://www.codeproject.com/Messages/2635230/how-I-do-to-execute-a-EXE-from-inside-my-applicati.aspx

mehdimughal 24-Jul-14 13:08pm

See in comments and discussion someone asked the same question and the answer doesn't sounds like that it would take that much, I think it can be done by creating a new thread but how exactly it would be ,i cant figure it out

Sergey Alexandrovich Kryukov 24-Jul-14 21:46pm

No, it does not sound like that. No matter what they say, it is "that much", like it or not. :-)
—SA

gggustafson 24-Jul-14 13:21pm

See my proposed solution, below.

2 solutions

Add a Solution

Add your solution here

Treat my content as plain text, not as HTML

Preview 0

…

Existing Members

Sign in to your account

...or Join us

Download, Vote, Comment, Publish.

Your Email
Password
Forgot your password?

Your Email
This email is in use. Do you need your password?
Optional Password

I have read and agree to the Terms of Service and Privacy Policy
Please subscribe me to the CodeProject newsletters

When answering a question please:

Read the question carefully.
Understand that English isn't everyone's first language so be lenient of bad spelling and grammar.
If a question is poorly phrased then either ask for clarification, ignore it, or edit the question and fix the problem. Insults are not welcome.
Don't tell someone to read the manual. Chances are they have and don't get it. Provide an answer or move on to the next question.

Let's work to help developers, not make them feel stupid.

This content, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)

Sergey Alexandrovich Kryukov · Accepted Answer · 2014-07-24T07:03:00

Please see my comment to the question. These difficulties would make the whole problem impractical to address. I would create a temporary file in a system "temp" directory, write a file and loaded the PE image.

Sounds non-professional? Then look at Microsoft. In their implementation of .NET CodeDOM, they have an option to compile some code into memory and load the assembly without using some PE file. And look how it is implemented: the executable module is created by a compiler in a temporary directory and then this file is loaded into the calling process. Why can't you allow yourself to do something like that?

—SA

gggustafson · Accepted Answer · 2014-07-24T07:20:00

Solution 2

See CODYQX4's answer in [C#] Run non .NET exe from memory [^]. Make sure you include credit.

Hope that helps.

Posted 24-Jul-14 7:20am

gggustafson