Binary protection mechanism that runs an embedded PE image in memory without writing it to disk. Useful for protecting game binaries, implementing anti-cheat systems, and DRM solutions.

• 32-bit and 64-bit Support: Works with both x86 and x64 PE binaries
• Windows 10/11 Compatible: Tested on latest Windows versions
• File-less Execution: Runs embedded PE without disk writes
• Proper Error Handling: Returns specific error codes for debugging
• Resource Cleanup: Properly releases handles and memory

• Windows 10 or Windows 11
• Visual Studio 2019 or later (or compatible compiler)
• Python 3.6+ (for the binary converter tool)

cl /EHsc /D_WIN64 Main.cpp /link /MACHINE:X64 /OUT:RunPE64.exe

cl /EHsc Main.cpp /link /MACHINE:X86 /OUT:RunPE32.exe

1. Create a new Windows Desktop Application project
2. Set platform to x64 (for 64-bit) or x86 (for 32-bit)
3. Add Main.cpp to the project
4. Build

Important: The loader architecture must match the payload architecture.

# Convert a 64-bit binary
python bin_to_carray.py your_game.exe payload.h --name rawData

# Convert a 32-bit binary
python bin_to_carray.py your_game_x86.exe payload.h --name rawData

The script will automatically detect and display the binary's architecture.

Replace the rawData array in Main.cpp with the contents of the generated header file.

Build the project with the matching architecture and run the resulting executable.

python bin_to_carray.py <input> [output] [options]

Arguments:
  input              Input binary file path
  output             Output file path (optional, prints to stdout)

Options:
  -n, --name NAME    Variable name for the array (default: rawData)
  -b, --bytes N      Bytes per line in output (default: 16)

Examples:
  bin_to_carray.py game.exe                    # Print to stdout
  bin_to_carray.py game.exe game_data.h        # Write to file
  bin_to_carray.py game.exe -n gamePayload     # Custom variable name

All APIs are standard Windows functions available since Windows XP and fully supported on Windows 10/11:

• CreateProcessA - Process creation
• VirtualAlloc / VirtualAllocEx - Memory allocation
• VirtualFree / VirtualFreeEx - Memory deallocation
• GetThreadContext / SetThreadContext - Thread context manipulation
• ReadProcessMemory / WriteProcessMemory - Cross-process memory operations
• ResumeThread - Thread execution control
• GetModuleFileNameA - Module path retrieval

This tool is intended for legitimate binary protection purposes:

• Game anti-cheat systems
• DRM implementation
• Binary asset protection
• Software licensing enforcement

Always ensure you have proper authorization to protect/embed any binaries.

MIT License - See LICENSE file for details.