code cave??

[spartacchio]

sry for my noobish but...wht is code caves and o delay address??
and wht is using for?
the only functions are not writelong,writepointerfloat,writepointerlong?? :peace******

[seth26jan]

A codecave :

An empty spot in the process ( like 6+ NOPS ).
Then, write your code IN ASM in the code cave.
Then, find someting that warrock call's and duplicate it.
Then, change the call to your code cave addie.

Credits to Dxt-Credzis(he explains it better than me :D)

It's not easy for the beginner, but you will get it. ;)

PS: You forgot NOPs.

[spartacchio]

A codecave :

An empty spot in the process ( like 6+ NOPS ).
Then, write your code IN ASM in the code cave.
Then, find someting that warrock call's and duplicate it.
Then, change the call to your code cave addie.

Credits to Dxt-Credzis(he explains it better than me :D)

It's not easy for the beginner, but you will get it. ;)

PS: You forgot NOPs.

ok^^ now i'm a bit confused..^^

how can i write my code in ASM?
i read something(in this forum) but i don't understand a lot....^^
why i should write my code in asm?fgt29

[seth26jan]

ok^^ now i'm a bit confused..^^

how can i write my code in ASM?
i read something(in this forum) but i don't understand a lot....^^
why i should write my code in asm?fgt29

You should use Assembly because it's the only thing(I'm pretty sure) that works. Start learning. fgt85

[spartacchio]

You should use Assembly because it's the only thing(I'm pretty sure) that works. Start learning. fgt85

void func(){
__asm{
// asm code
};
};

ok, i use this code to integrate asm in c++,and i put my ASM NOP here // asm code ??
If i use this function i make an ASM Nop,rigth?

[ZeaS]

just get the 0delay and look at the hex why should he use codecave ?!

[seth26jan]

I use codecaves...What else will work? What function besides Assembly?

[spartacchio]

sry but NOW i really confused!!:jerry
0delay addyes means Nop?
WHY i should use ASM and not a simple Nop(dxt-Cobra tut) ??
Plz tell me...i need to know the difference betwen the two (3, 0 delay) tecniques..
fgt85

[seth26jan]

I was told to use a code cave..and it worked... If there is another, easier method I would love to know. If NOPs work, then pigs would be hacking WarRock right now using their l33t h4x!

[spartacchio]

A codecave :

An empty spot in the process ( like 6+ NOPS ).
Then, write your code IN ASM in the code cave.
Then, find someting that warrock call's and duplicate it.
Then, change the call to your code cave addie.

Credits to Dxt-Credzis(he explains it better than me :D)

It's not easy for the beginner, but you will get it. ;)

PS: You forgot NOPs.

I undertand that u told me to use a code cave but i don't uderstand too much...
to make a code cave i need to do a Nop and than write my ASM code or not??
Can u post an example...also in PM if u don't want to post here.
Plz..only to understand bit more.than i will found my own way! ^^

[spartacchio]

you know __asm(or inline asm) isnt always nessisary.
using CE you can change the value to what you need and then copy the value
then turn it into a C++ array

BYTE Array1[ ] = {0x00,0x00,0x00,0x00,0x00};
is a example. each 0x00 represents a address its going to write to in order
so in CE if you see

0x40493A - asm code
0x404941 - asm code
and you use the first one. subtract 40493A from 404941.

lets say 40493A were to be 0 delay (its not)
and 0 delay was to be 5 bytes(i dont think it is)
you would take the on value(nops) and make them in a C++ 5 times


BYTE Array1[ ] = {0x90,0x90,0x90,0x90,0x90};
and use writeprocessmemory using the value Array1 to the address.

*another way to get bytes in CE, right click the address and replace with code that does nothing. count all the nops u see going down. thats how many bytes it is

or use
__asm
{
code code code
code code code
}
inside of a funtion.

Thx for answer (no much people answer^^).
I try to do a code cave(obviously in ASM) but when i make my ASM code (block or inline is equal) Vcpp6 tell me that (f EX. nop,mov,jmp...) aren't defined.
I also add <window.h> in header.
How can i solve that problem??
How understand what i should do to make ASM blocks and code cave but i'm stopped because Vcpp can't read ASM (MASM is microsoft ASM) and vcpp debugger i think use MASM ... =(

[masterboy]

You need a asm function added in your project

[R3bel19]

First of all you dont need for all assembly fgt77

I dont know what a codecave is but I think it is something like a Detour.
And 0 delay is ..if you shoot all out of your magazin in one time.
And you can write in c++ and vb6 too or whatever you want.


R3bel19

[spartacchio]

You need a asm function added in your project

This is my ASM function

__asm
{
code code code
code code code
}
inside of a funtion.

The ASM function (declaration) is right but vcpp cant read mov,jmp,nop.....THIS is my problem

[Anthrax]

heres an example on how to do it inline

void wrtext()
{
void func = 0x00123456; //(just an example)
_asm
{
//asm code (PUSH's and such)
call func
}
}

then just call the function, hope that helped

[Fragment]

CODE CAVE:

A program has very many functions, and values, and all. Then, there are these things called CODE CAVES. These are basically, just blank spots. These are parts of the program that the program NEVER executes, or even LOOKS AT.

SO! This is useful, because if you want to assign a value to a variable, or do some complex stuff, that just does NOT FIT where the original code was, you should jump to a code cave. Code caves are easy to find, Even in cheat engine, in the debugger, In the tools menu, there is a quick and easy way to scan for code caves. CE just basically scans the executable for things that are not even looked at by the executable.

The Start and Stop addresses are just where the scanner will start and stop scanning. The SIZE thing, is just basically tells cheatengine to find only code caves that are of that size. For example, if you wanted to do some complex math, and assign some variables, and the entire thing was 42 bytes long, you could put in 42 for the size, and cheatengine would find some for you.