How to Modify Executable Code in Memory

This article was previously published under Q127904
This article has been archived. It is offered "as is" and will no longer be updated.
Follow the steps in this article to create self-modifying code; that is, tomodify code pages while they are in memory and execute them there.

NOTE: Self-modifying code is not advised, but there are cases where you maywish to use it.

Step-by-Step Example

  1. Call VirtualProtect() on the code pages you want to modify, with the PAGE_WRITECOPY protection.
  2. Modify the code pages.
  3. Call VirtualProtect() on the modified code pages, with the PAGE_EXECUTE protection.
  4. Call FlushInstructionCache().
All four steps are required. The reason for calling FlushInstructionCache()is to make sure that your changes are executed. As processors get faster,the instruction caches on the chips get larger. This allows more out oforder prefetching to be done. If you modify your code, but do not callFlushInstructionCache(), the previous instructions may already be in thecache and your changes will not be executed.
3.50 4.00
Properties

Article ID: 127904 - Last Review: 02/24/2014 08:19:20 - Revision: 2.1

  • Microsoft Win32 Application Programming Interface
  • kbnosurvey kbarchive KB127904
Feedback