Click here to Skip to main content
15,314,664 members
Articles / Programming Languages / C#
Posted 29 Aug 2004


29 bookmarked

Execute Native Code From .NET

Rate me:
Please Sign up or sign in to vote.
3.20/5 (12 votes)
29 Aug 2004
Explains how to execute native code from a .NET program.


If you want to prevent your program from being cracked by hackers, you can use native code. You can cipher/decipher this code, or it may be self-modifying code for more safety. Now, I'll show how you can execute such native code from your C# programs.

Source code

This example retrieves CPU information.

private void button1_Click(object sender, System.EventArgs e)
  // native function's compiled code

  byte[] proc = new byte[] {

               0x55, 0x8B, 0xEC, 0x83, 0xEC, 0x00, 0x53, 0x51, 
               0x52, 0x57, 0x8B, 0x7D, 0x08, 0x33, 0xC0, 0x0F, 
               0xA2, 0x89, 0x07, 0x89, 0x5F, 0x04, 0x89, 0x57, 
               0x08, 0x89, 0x4F, 0x0C, 0xB8, 0x01, 0x00, 0x00, 
               0x00, 0x0F, 0xA2, 0x89, 0x47, 0x10, 0x89, 0x57, 
               0x14, 0xB8, 0x00, 0x00, 0x00, 0x80, 0x0F, 0xA2, 
               0x3D, 0x00, 0x00, 0x00, 0x80, 0x72, 0x0A, 0xB8, 
               0x01, 0x00, 0x00, 0x80, 0x0F, 0xA2, 0x89, 0x57, 
               0x18, 0x5F, 0x59, 0x5B, 0x5A, 0x8B, 0xE5, 0x5D, 
               0x33, 0xC0, 0xC2, 0x04, 0x00
  UInt32 funcAddr = VirtualAlloc(0, (UInt32)proc.Length, 
  Marshal.Copy(proc, 0, (IntPtr)(funcAddr), proc.Length);
  IntPtr hThread = IntPtr.Zero;
  UInt32 threadId = 0;
  // prepare data


  IntPtr pinfo = 

  Marshal.StructureToPtr(info, pinfo, false);

  // execute native code

  hThread = CreateThread(0, 0, funcAddr, pinfo, 0, ref threadId);

  WaitForSingleObject(hThread, 0xFFFFFFFF);
  // retrive data

  info = (PROCESSOR_INFO)Marshal.PtrToStructure(pinfo, 

  VirtualFree((IntPtr)funcAddr, 0, MEM_RELEASE);

private UInt32 MEM_COMMIT = 0x1000;

private UInt32 PAGE_EXECUTE_READWRITE = 0x40;

private UInt32 MEM_RELEASE = 0x8000;

private static extern UInt32 VirtualAlloc(UInt32 lpStartAddr, 
     UInt32 size, UInt32 flAllocationType, UInt32 flProtect);

private static extern bool VirtualFree(IntPtr lpAddress, 
                      UInt32 dwSize, UInt32 dwFreeType);

private static extern IntPtr CreateThread(

  UInt32 lpThreadAttributes,
  UInt32 dwStackSize,
  UInt32 lpStartAddress,
  IntPtr param,
  UInt32 dwCreationFlags,
  ref UInt32 lpThreadId

private static extern bool CloseHandle(IntPtr handle);

private static extern UInt32 WaitForSingleObject(

  IntPtr hHandle,
  UInt32 dwMilliseconds
private static extern IntPtr GetModuleHandle(

  string moduleName

private static extern UInt32 GetProcAddress(

  IntPtr hModule,
  string procName

private static extern UInt32 LoadLibrary(

  string lpFileName

private static extern UInt32 GetLastError();

internal struct PROCESSOR_INFO 
  public UInt32 dwMax; 
  public UInt32 id0;
  public UInt32 id1;
  public UInt32 id2;

  public UInt32 dwStandard;
  public UInt32 dwFeature;

  // if AMD
  public UInt32 dwExt;


This article has no explicit license attached to it but may contain usage terms in the article text or the download files themselves. If in doubt please contact the author via the discussion board below.

A list of licenses authors might use can be found here


About the Author

Maxim Alekseykin
Team Leader
Russian Federation Russian Federation

Now is looking for remote job.

- C++/C#, VB/VBA, SQL Server/Access databases.
- automatic testing, code review
- performance tuning

Comments and Discussions

fuck bill gates22-Jan-09 0:49
Memberfuck bill gates22-Jan-09 0:49 
Questionhow I do to execute a EXE from inside my application? Pin
sebastiannielsen12-Jul-08 2:43
Membersebastiannielsen12-Jul-08 2:43 
AnswerRe: how I do to execute a EXE from inside my application? Pin
Maxim Alekseykin14-Jul-08 3:04
MemberMaxim Alekseykin14-Jul-08 3:04 
GeneralWhere did you get the proc binary Pin
I like it2-Nov-05 6:18
MemberI like it2-Nov-05 6:18 
GeneralRe: Where did you get the proc binary Pin
Maxim Alekseykin2-Nov-05 9:14
MemberMaxim Alekseykin2-Nov-05 9:14 
QuestionHow to use CStringArray in C# using p/invoke Pin
shusong18-Apr-05 15:50
Membershusong18-Apr-05 15:50 
AnswerRe: How to use CStringArray in C# using p/invoke Pin
Maxim Alekseykin19-Apr-05 1:11
MemberMaxim Alekseykin19-Apr-05 1:11 
GeneralRe: How to use CStringArray in C# using p/invoke Pin
shusong19-Apr-05 16:16
Membershusong19-Apr-05 16:16 
GeneralLegacy plug-ins Pin
Leonardo Pessoa8-Sep-04 9:13
MemberLeonardo Pessoa8-Sep-04 9:13 
GeneralInteresting Technique Pin
Lim Bio Liong30-Aug-04 18:57
MemberLim Bio Liong30-Aug-04 18:57 
GeneralRe: Interesting Technique Pin
Maxim Alekseykin30-Aug-04 22:09
MemberMaxim Alekseykin30-Aug-04 22:09 
GeneralGood Technique (for me!) Pin
Marcello Cantelmo30-Aug-04 10:41
MemberMarcello Cantelmo30-Aug-04 10:41 
GeneralRe: Good Technique (for me!) Pin
Maxim Alekseykin30-Aug-04 22:22
MemberMaxim Alekseykin30-Aug-04 22:22 
GeneralRe: Good Technique (for me!) Pin
Marcello Cantelmo30-Aug-04 23:30
MemberMarcello Cantelmo30-Aug-04 23:30 

General General    News News    Suggestion Suggestion    Question Question    Bug Bug    Answer Answer    Joke Joke    Praise Praise    Rant Rant    Admin Admin   

Use Ctrl+Left/Right to switch messages, Ctrl+Up/Down to switch threads, Ctrl+Shift+Left/Right to switch pages.